summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch
diff options
context:
space:
mode:
authorYu Ke <ke.yu@intel.com>2011-02-28 19:34:45 +0800
committerSaul Wold <sgw@linux.intel.com>2011-03-01 07:27:31 -0800
commitf3a482b47678819b4a91bb58810c7bc6ef9e6f3e (patch)
treec3301f389f7b617859e7a56619d24f6bf798384d /meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch
parent0e1f8c2609233b3f95f97d13c7793d7572036c99 (diff)
downloadpoky-f3a482b47678819b4a91bb58810c7bc6ef9e6f3e.tar.gz
shadow: upgrade to 4.1.4.3 to fix security vulnerability
For CVE-2011-0721: http://lists.debian.org/debian-security-announce/2011/msg00030.html Signed-off-by: Yu Ke <ke.yu@intel.com>
Diffstat (limited to 'meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch')
-rw-r--r--meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch23
1 files changed, 23 insertions, 0 deletions
diff --git a/meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch b/meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch
new file mode 100644
index 0000000000..7a2ff2e24e
--- /dev/null
+++ b/meta/recipes-extended/shadow/files/shadow-4.1.3-dots-in-usernames.patch
@@ -0,0 +1,23 @@
1# commit message copied from openembedded:
2# commit 246c80637b135f3a113d319b163422f98174ee6c
3# Author: Khem Raj <raj.khem@gmail.com>
4# Date: Wed Jun 9 13:37:03 2010 -0700
5#
6# shadow-4.1.4.2: Add patches to support dots in login id.
7#
8# Signed-off-by: Khem Raj <raj.khem@gmail.com>
9#
10# comment added by Kevin Tian <kevin.tian@intel.com>, 2010-08-11
11
12Index: shadow-4.1.4.2/libmisc/chkname.c
13===================================================================
14--- shadow-4.1.4.2.orig/libmisc/chkname.c 2009-04-28 12:14:04.000000000 -0700
15+++ shadow-4.1.4.2/libmisc/chkname.c 2010-06-03 17:43:20.638973857 -0700
16@@ -61,6 +61,7 @@ static bool is_valid_name (const char *n
17 ( ('0' <= *name) && ('9' >= *name) ) ||
18 ('_' == *name) ||
19 ('-' == *name) ||
20+ ('.' == *name) ||
21 ( ('$' == *name) && ('\0' == *(name + 1)) )
22 )) {
23 return false;